CVE-2017-3618

CVE-2017-3618 is a vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools, specifically affecting ASR Manager versions prior to 5.7. A low-privileged attacker with local logon access to the ASR infrastructure can exploit this to achieve unauthorized creation, deletion, or modification of critical ASR data, as well as unauthorized access to all ASR-accessible data. With a CVSS 3.0 Base Score of 7.1 (High), this vulnerability has low attack complexity and requires no user interaction, impacting confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.